Private by organisation
Each organisation has a separate signed-in workspace. Access is checked against organisation membership.
A governance product should show who can access data, who changed what and where judgement is still required.
Each organisation has a separate signed-in workspace. Access is checked against organisation membership.
Administrators, members and read-only auditors have different permissions. Central platform access does not include customer records by default.
Policy revisions, named approvals, evidence records and key changes are preserved with dates and actors.
Screening records the rationale and flags review instead of turning incomplete answers into a reassuring score.
Organisation-level access controls, protected evidence files, policy version history, role-based approvals, recorded changes and dated report snapshots.
Published privacy terms and DPA, verified processing details, tested recovery procedures, completed legal review and an independent security assessment.